Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93d0d769-14fa-486e-9262-e49c64d46e9c.roa
File:                     93d0d769-14fa-486e-9262-e49c64d46e9c.roa (raw, json)
Hash identifier:          KbLN3BtsyunUZUygJqfVlQCCaEhV2vY627PTh+7xZgg=
Subject key identifier:   50:62:5A:59:E1:F1:91:EB:ED:58:F6:9A:C9:16:F3:C3:9F:3E:A5:51
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       5465C8C5F8D84F3DCCDAE9F8CD0FA260016F32D6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93d0d769-14fa-486e-9262-e49c64d46e9c.roa
Signing time:             Sat 28 Feb 2026 01:20:49 +0000
ROA not before:           Sat 28 Feb 2026 01:20:49 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        18.208.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:65:c8:c5:f8:d8:4f:3d:cc:da:e9:f8:cd:0f:a2:60:01:6f:32:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 28 01:20:49 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=3b050e29e93b264da993871ed2ba579f8d2f1ddef079186bd23c0bbbdce2172e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3d:65:71:05:0b:81:95:99:ad:d3:98:a5:9c:
                    41:d0:bf:cf:95:f5:39:f0:9b:9e:7f:d7:b3:7c:f4:
                    bc:79:7e:ce:1b:ef:5a:47:0d:32:9f:fe:f4:c3:e4:
                    ee:2a:78:99:c6:38:c5:14:52:0c:15:8d:7b:17:63:
                    2c:0e:82:d6:d4:d7:88:9b:58:23:20:e3:c3:52:a3:
                    3f:08:eb:82:ba:92:60:2a:b5:4a:f6:d0:f3:22:82:
                    fd:1f:8c:76:fe:0a:80:8f:58:78:b0:94:b2:e1:dc:
                    6b:81:39:ea:80:74:80:97:db:fb:02:2c:65:86:90:
                    e6:dd:fb:60:f8:15:eb:e3:23:4c:ce:9f:9a:f3:50:
                    c9:ec:83:9a:45:12:0b:4d:6f:be:01:48:60:59:3a:
                    30:b7:7a:6f:fe:e0:ca:90:a2:18:0e:25:e5:11:82:
                    9f:49:1e:9e:ad:55:09:72:47:b8:02:74:a5:72:7c:
                    bf:7b:91:fa:a2:5f:d5:63:39:8f:13:34:83:6c:45:
                    06:08:e9:06:69:97:a3:48:2f:b9:00:3c:1a:a9:8a:
                    6f:37:81:56:e3:52:55:1f:11:08:bc:a7:89:0d:e9:
                    a7:7b:78:aa:f8:6a:db:08:c6:06:80:0c:5c:5f:a8:
                    94:a7:1d:1f:c2:42:23:7b:7d:6b:4c:6b:60:ac:92:
                    6a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:62:5A:59:E1:F1:91:EB:ED:58:F6:9A:C9:16:F3:C3:9F:3E:A5:51
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93d0d769-14fa-486e-9262-e49c64d46e9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.208.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         61:31:a9:08:30:60:1c:81:b7:cc:35:41:84:95:29:be:a3:39:
         f1:51:44:94:56:7e:84:71:d1:91:35:53:07:94:34:fd:22:aa:
         de:80:5e:f4:3b:b6:65:41:01:40:99:1a:7f:09:f9:ca:da:94:
         7c:fc:0e:ef:83:84:af:1f:04:d8:19:f7:16:cb:1b:77:38:8d:
         8a:53:e1:8b:d8:dc:7b:92:ea:70:85:5e:49:94:fe:8a:6a:6e:
         f1:be:e0:37:70:a2:89:a7:88:b3:64:3a:9c:fc:a0:65:4b:57:
         2b:af:2e:e9:57:79:12:4b:ca:c1:77:10:45:0c:b6:cd:4c:9d:
         9b:21:e2:84:7c:77:66:35:77:1c:15:76:71:4e:ae:22:72:cb:
         02:df:4e:a4:8d:94:da:ec:7b:df:86:ce:8a:55:6e:2e:99:2f:
         57:23:1a:78:cc:7c:da:3d:75:d4:15:27:75:5f:b5:38:ae:00:
         63:26:25:24:ed:26:7e:81:ed:b7:4c:aa:5b:c1:2a:ed:3d:7b:
         37:ce:1e:ea:ef:35:ef:54:da:c2:39:2c:20:2f:ce:c0:d1:48:
         62:55:bc:1c:12:e4:25:7c:b7:7b:1a:60:6b:53:6b:01:55:07:
         2e:c8:45:17:b7:15:bf:de:f3:79:be:a7:13:67:3f:da:c8:9d:
         66:eb:f7:d5
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUVGXIxfjYTz3M2un4zQ+iYAFvMtYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI4MDEyMDQ5WhcNMjYwNTI5MjM1OTU5
WjB6MUkwRwYDVQQFE0AzYjA1MGUyOWU5M2IyNjRkYTk5Mzg3MWVkMmJhNTc5Zjhk
MmYxZGRlZjA3OTE4NmJkMjNjMGJiYmRjZTIxNzJlMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpPWVxBQuBlZmt05ilnEHQv8+V9Tnwm55/17N89Lx5fs4b
71pHDTKf/vTD5O4qeJnGOMUUUgwVjXsXYywOgtbU14ibWCMg48NSoz8I64K6kmAq
tUr20PMigv0fjHb+CoCPWHiwlLLh3GuBOeqAdICX2/sCLGWGkObd+2D4FevjI0zO
n5rzUMnsg5pFEgtNb74BSGBZOjC3em/+4MqQohgOJeURgp9JHp6tVQlyR7gCdKVy
fL97kfqiX9VjOY8TNINsRQYI6QZpl6NIL7kAPBqpim83gVbjUlUfEQi8p4kN6ad7
eKr4atsIxgaADFxfqJSnHR/CQiN7fWtMa2CskmphAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUUGJaWeHxkevtWPaayRbzw58+pVEwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzkzZDBkNzY5LTE0ZmEtNDg2ZS05MjYyLWU0OWM2NGQ0NmU5Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwMS0DANBgkqhkiG9w0BAQsFAAOCAQEAYTGpCDBgHIG3zDVBhJUpvqM58VFE
lFZ+hHHRkTVTB5Q0/SKq3oBe9Du2ZUEBQJkafwn5ytqUfPwO74OErx8E2Bn3Fssb
dziNilPhi9jce5LqcIVeSZT+impu8b7gN3CiiaeIs2Q6nPygZUtXK68u6Vd5EkvK
wXcQRQy2zUydmyHihHx3ZjV3HBV2cU6uInLLAt9OpI2U2ux734bOilVuLpkvVyMa
eMx82j111BUndV+1OK4AYyYlJO0mfoHtt0yqW8Eq7T17N84e6u8171TawjksIC/O
wNFIYlW8HBLkJXy3expga1NrAVUHLshFF7cVv97zeb6nE2c/2sidZuv31Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:01:18 2026 by rpki-client